Shanglun Feng

Privacy Backdoors: Stealing Data with Corrupted Pretrained Models

Practitioners commonly download pretrained machine learning models from open repositories and finetune them to fit specific applications. We show that this practice introduces a new risk of privacy backdoors. By tampering with a pretrained model’s weights, an attacker can fully compromise the privac…